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DETAILED ACTION 

1 . This office action is in reply to the pre-appeal filed on February 07, 2008. 

2. Claim 17 has been canceled. 

3. Claims 1-16 and 8 are pending. 

Response to Amendment 

4. Applicant's arguments with respect to claims 1-16 and 8 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though ihc in\ anion is not identically disclosed or described as set forth in section 
1 02 of this title, i 1" the di fi'erences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill 
in the ail to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

6. Claims 1-16 and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Deng et al 
(US 6,701 ,432) in view of Walmsley (US 7,165,824). 

As per claim 1 Deng discloses: 

A processor, comprising: an authentication buffer configured to store authentication data 
including ciphered-network-packet data subject to authentication, (column 5, line 45-50, authentication 
engine 404 assures that a communication (packet) is authentic. In one implementation MD5 and SHA1 
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algorithms are invoked to verify authentication of packets. Authentication buffer 406 is a temporary buffer 
for storing partial results generated by authentication engine 404). 

Network packet data subject only to authentication and not to ciphering, (column 11, 1-6, the 
process begins after a packet is received at a network interface and DMA'ed to dual-port memory 203 
(802). If the packet is permitted (804) after the firewall inspection (803) and authentication is needed 
(806), the following operations are performed). Encryption is optional (see fig. 7, block 706). 

At least one authentication core coupled to the authentication buffer to authenticate the 
authentication data from the authentication buffer. (Column 11, line 7-11, an authentication algorithm is 
selected (808). In one implementation, two authentication algorithms (MD5 and SHA1) are included in 
authentication engine 404. 

Network packet data subject to ciphering and authentication, wherein tile authentication buffer 
includes a circular first-in-first-out (FIFO) arrangement; (see fig 4, block 406 and 402). 

Deng does not explicitly disclose about the circular FIFO arrangement. However, on the same 
field of endeavor, Walmsley teaches this limitation as, (a circular buffer, both the fifo read and write- 
pointers wrap-around to zero after they reach two). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Deng and include the circular FIFO arrangement using the 
teaching of Walmsley in order to arrange the packet authentication in accordance to the time that the 
packet arrived to the authenticator and avoid the packet delay by using First in First out (FIFO) method. 

Claims 5, 9 and 14 are rejected under the same reason set forth in rejection of claim 1 : 

As per claim 2 Deng in view of Walmsley discloses: 

Deng fails to disclose the circular FIFO arrangement includes a moveable start of data pointer 
and a moveable end of data pointer. However, on the same field of endeavor, Walmsley teaches this 
limitation as, (a circular buffer, both the fifo read and write-pointers wrap-around to zero after they reach 
two). 
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Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Deng and include the circular FIFO arrangement includes 
a moveable start of data pointer and a moveab using the teaching of Walmsley in order to arrange the 
packet authentication in accordance to the time that the packet arrived to the authenticator and avoid the 
packet delay by using First in First out (FIFO) method. 

Claims 6 and 12 are rejected under the same reason set forth in rejection of claim 2: 

As per claim 3 Deng in view of Walmsley discloses: 

The processor of Claim 1 , wherein the network processor further includes at least one cipher core 
adapted to operate with a cipher algorithm and the at least one authentication core is adapted to operate 
with an authentication algorithm, (see fig 4, block 406 and 402). 

Deng fails to discloses a size of the authentication buffer is selected in accordance with a data 
block size associated with the cipher algorithm and a data block size associated with the authentication 
algorithm. However, on the same field of endeavor, Walmsley teaches this limitation as, (The time 
available to write the data is a function of the size of the buffer in DRAM. 1 .5 buffering means 4 color pixel 
(32 bits) must be written every SF.sup.2/2 (scale factor) cycles. Therefore, at a scale factor of SF, 64 bits 
are required every SF.sup.2 cycles.). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Deng and include the size of buffer is selected in 
accordance with a data block size using the teaching of Walmsley in order to arrange the memory (buffer) 
according to the data and allocate enough storage space. 

Claims 7, 13 and 18 are rejected under the same reason set forth in rejection of claim 3: 



As per claim 4 Deng in view of Walmsley discloses: 
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The processor of Claim 1 , wherein the authentication core is adapted to authenticate the 
authentication data from the authentication buffer as blocks of authentication data, (column 5, line 45-50, 
authentication engine 404 assures that a communication (packet) is authentic. In one implementation 
MD5 and SHA1 algorithms are invoked to verify authentication of packets. Authentication buffer 406 is a 
temporary buffer for storing partial results generated by authentication engine 404). 

Claim 8 is rejected under the same reason set forth in rejection of claim 4: 

As per claim 10 Deng in view of Walmsley discloses: 

The method of Claim 9, wherein the moving to an authentication buffer authentication data 
comprises selecting the authentication buffer from among a plurality of authentication buffers. (Column 5, 
line 45-50, authentication engine 404 assures that a communication (packet) is authentic. In one 
implementation MD5 and SHA1 algorithms are invoked to verify authentication of packets. Authentication 
buffer 406 is a temporary buffer for storing partial results generated by authentication engine 404). 

Claim 15 is rejected under the same reason set forth in rejection of claim 10: 

As per claim 1 1 Deng in view of Walmsley discloses: 

The method of Claim 9, further including: setting a start of data pointer and an end of data pointer 
to respective initial locations; setting the end of data pointer in accordance with the moving tile 
authentication data to the authentication buffer; setting the start of data pointer in accordance with the 
moving to the authentication core the block of data from the authentication buffer, (column 3, 42-48, the 
first portion of rules can include a pointer to a location in the second portion of rules. The pointer can be in 
the form of a rule that includes both a pointer code and also an address in the external memory 
designating a next rule to evaluate when screening a current packet. The next rule to evaluate is included 
in the second portion of rules. 
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Claim 1 6 is rejected under the same reason set forth in rejection of claim 1 1 : 
Conclusion 

7. The prior art made or record and not relied upon is considered pertinent to applicant's disclosure. 

TITLE: Multi-level boot hierarchy for software development on a integrated circuit, US Pub. No. 
2007/0006150. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to TESHOME HAILU whose telephone number is (571)270-3159. The examiner can normally 
be reached on Mon-Fri 7:30a.m. to 5:00p.m. PST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Kristine L. Kincaid can be reached on (571 ) 272-4063. The fax phone number for the organization where 
this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative 
or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 



Teshome Hailu 
May 28, 2008 



/Kristine Kincaid/ 

Supervisory Patent Examiner, Art Unit 
2139 



Application/Control Number: 1 0/741 ,676 Page 7 

Art Unit: 2139 



